Merge pull request #78 from fluxcd/verify-pgp

Verify signed release

Author: stefanprodan

.github/workflows/release.yaml

@@ -36,8 +36,12 @@ jobs:
       - name: Verify signed release
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          git -P show ${GITHUB_REF_NAME} | grep -q 'PGP SIGNATURE' || \
-          { echo "No PGP signature found for tag ${GITHUB_REF_NAME}. Aborting release process..."; exit 1; }
+          if git -P show ${GITHUB_REF_NAME} | grep -q 'END PGP SIGNATURE'; then
+            echo "PGP signature found for ${GITHUB_REF_NAME} tag."
+          else
+            echo "No PGP signature found for tag  ${GITHUB_REF_NAME}. Aborting release process..."
+            exit 1
+          fi
       - name: Prepare
         id: prep
         run: |